cupure logo

Hacking group that hit M&S claims responsibility for JLR cyber attack

Hacking group that hit M&S claims responsibility for JLR cyber attack
No new Land Rover cars are able to be made or registered as manufacturer races to solve global system fault The same group which hacked Marks and Spencer earlier this year has claimed responsibility for the cyber attack on Jaguar Land Rover which has caused production shutdowns and sales stoppages. Scattered Spider hit the British supermarket in May causing seven weeks of disruption and costing £300m in lost operating profit. Along with fellow hacking group Shiny Hunters the pair claim to have obtained customer data after exploiting a similar flaw in JLR’s IT system, reports The Telegraph. The claim was made on a Telegram messenger group where a user linked to the hackers posted a screenshot of what appeared to show the car maker’s internal system. A member of the group told The Telegraph a widely-known flaw in SAP Netweaver - the third-party software used by JLR - was exploited to access the data. The flaw is well known and was warned about by US cyber agency CISA earlier this year. An update was released but whether JLR applied it is unknown. It is not known what data was taken or if a ransom demand has been made. JLR told Autocar in a statement yesterday that “there is no evidence any customer data has been stolen”. It refused to comment on the latest claims on Wednesday. The hack has caused three days of sales and production issues which have “severely disrupted” the brand, it said. In an effort to combat the hack, the firm began “shutting down our systems” on Tuesday and is now in the timely process of rebuilding them. This shutting down of systems has led to a halt of production at both Halewood and Solihull, the latter where the Range Rover and Range Rover Sport are built.  JLR was also unable to confirm a timescale for the fix, but it is understood that it could continue to cause disruption for the rest of the week. According to The Telegraph, the hacking groups are believed to be made up of teenagers from English-speaking countries. Autocar first reported the issues affecting JLR dealer registrations on Monday which meant cars could not be registered on 'new plate' day (1 September), traditionally one of the year's busiest for new car registrations. To combat the delays, the registering of cars is now being carried out by hand, a dealer revealed to Autocar on Wednesday.  Autocar also understands the issues are impacting parts supplies and new car handovers. JLR however would not confirm this. JLR's public-facing website appears to be fully operational, including the car configurator.

Comments

automobile news